Docs / Enrollment / Mobile / Android Profiles

Android Profiles

Android Profiles allow you to configure and enforce settings on managed Android devices. Profiles are deployed through Android Enterprise (AMAPI) and support both Device Owner and Work Profile management modes.

Overview

Profiles provide a way to push configuration settings to Android devices without manual intervention. Once deployed, profiles are automatically applied to targeted devices.

Requirements

  • Android Enterprise must be configured in Configuration Settings > Mobile
  • Devices must be enrolled with ZSync in either Device Owner or Work Profile mode
  • Appropriate targeting rules or assignment groups must be configured

Profile Types

WiFi Profiles

Configure wireless network connections on managed devices. WiFi profiles can include:

  • Network Name (SSID) - The wireless network identifier
  • Security Type - Open, WPA/WPA2 Personal, WPA/WPA2 Enterprise, WPA3
  • Password - Pre-shared key for personal networks
  • Enterprise Settings - EAP type, identity, certificates for enterprise networks
  • Hidden Network - Connect to networks that don't broadcast their SSID
  • Auto-Join - Automatically connect when in range

Passcode Policies

Enforce password requirements on devices:

  • Minimum Length - Required password length (4-16 characters)
  • Password Quality - Numeric, alphabetic, alphanumeric, or complex
  • Maximum Failed Attempts - Wipe device after failed attempts
  • Lock Timeout - Auto-lock after inactivity period
  • Password Expiry - Force password change after specified days
  • Password History - Prevent reuse of recent passwords

Restrictions

Control device features and capabilities:

  • Camera - Disable device camera
  • Screen Capture - Prevent screenshots
  • USB File Transfer - Block file transfers via USB
  • Bluetooth - Disable Bluetooth connectivity
  • Factory Reset - Prevent factory reset
  • Safe Mode - Prevent booting into safe mode
  • App Installation - Control app installation from unknown sources
  • Developer Options - Disable developer mode

Creating a Profile

  1. Navigate to Mobile Devices > Profiles
  2. Click Create Profile
  3. Select Android as the platform
  4. Choose the profile type (WiFi, Passcode, or Restrictions)
  5. Enter a name and description for the profile
  6. Configure the profile settings
  7. Set targeting rules or select assignment groups
  8. Click Create

Targeting Devices

Profiles can be targeted to devices using two methods:

Direct Targeting Rules

Define rules directly on the profile to target devices based on:

  • All Devices - Deploy to all Android devices
  • OS Versions - Target specific Android versions
  • Management Mode - Device Owner or Work Profile only
  • Manufacturers - Target specific device manufacturers
  • Models - Target specific device models
  • Specific Devices - Select individual devices by ID
  • Exclude Devices - Exclude specific devices from deployment

Assignment Groups

Select one or more assignment groups to target devices. This is the recommended approach for:

  • Reusing targeting rules across multiple profiles
  • Staged deployments across environments (DEV, UAT, PROD)
  • Easier management of device targeting

Deploying Profiles

Manual Deployment

  1. Open the profile from the Profiles list
  2. Click Deploy
  3. Review the devices that will receive the profile
  4. Confirm the deployment

Automatic Deployment

When a profile has targeting rules configured, it can be automatically deployed to matching devices when they enrol or when their properties change to match the rules.

Viewing Profile Status

The Profiles dashboard shows:

  • Total Profiles - Number of configured profiles
  • WiFi - WiFi profile count
  • Passcode - Passcode policy count
  • Restrictions - Restrictions profile count

Profile Details

Click on a profile to view:

  • Profile configuration settings
  • Deployment status (pending, installed, failed)
  • List of devices with the profile
  • Installation timestamps

Updating Profiles

When you update a profile:

  1. Open the profile and click Edit
  2. Make your changes
  3. Click Save
  4. The profile version is incremented
  5. Click Re-deploy to push changes to devices

Removing Profiles

Remove from Devices

To remove a profile from devices while keeping it configured:

  1. Open the profile details
  2. Click Remove from Devices
  3. Select which devices to remove the profile from (or all)
  4. Confirm the removal

Delete Profile

To permanently delete a profile:

  1. Open the profile details
  2. Click Delete
  3. Confirm the deletion

Management Mode Considerations

Device Owner Mode

Full device control with access to all profile types and settings.

Work Profile Mode

Profiles only affect the Work Profile, not the personal side of the device. Some restrictions may have limited effect in Work Profile mode.

Best Practices

  • Use descriptive names that indicate the profile's purpose
  • Test profiles on a small group of devices before wide deployment
  • Use Assignment Groups for staged rollouts
  • Document any changes made to profiles
  • Review failed deployments and address issues promptly
  • Keep passcode policies reasonable to avoid user frustration